Integrity monitor for TCAS mutual suppression

Abstract: An integrity monitor for TCAS mutual suppression checks the interface circuits and cabling of the suppression system that lies between the TCAS processor and the transponder. The monitor starts by interrogating the transponder while disabling suppression. If no reply is received, the transponder is not functional. If a reply is received, interrogation of the transponder occurs again, however, this time suppression is enabled. If a reply is received, the suppression system has failed and TCAS alarms will be inhibited. If a reply is not received, the suppression system is working.

Description: Background of the Invention Field of the Invention The present invention relates to Traffic Alert and Collision Avoidance Systems (TCAS) and more particularly to detecting failures in the TCAS processor. Description of the Prior Art TCAS, the Traffic Alert and Collision Avoidance System, provides for safe separation of airborne traffic. To accomplish this, an airborne interrogator, the TCAS processor, interrogates an ATC transponder of other aircraft that are in the proximity of the TCAS equipped aircraft. The replies from the transponders of the other aircraft provide altitude and range of the other aircraft to the TCAS system. The TCAS equipped aircraft also carries an ATC transponder. In order to ensure that the transponder on the TCAS equipped aircraft does not reply to interrogations from its own TCAS it is equipped with a system called mutual suppression. The mutual suppression signal from the TCAS processor effectively disables the ATC transponder on the TCAS equipped aircraft at the time of interrogation. The ATC transponder is enabled again after the interrogation. The time that the transponder is suppressed is very brief (less than 90 microseconds). The mutual suppression signal is applied to the transponder via a cable which connects the TCAS processor, the ATC transponder, and other avionics equipment which might be affected by the TCAS transmission. If this cable becomes disconnected, or the interface circuits in the transponder or TCAS processor fail to function, it is possible for the TCAS processor to receive replies from its own transponder. If the TCAS processor receives these replies consistently, it will interpret them as coming from a very close aircraft which is at the same altitude as its own aircraft. This will cause a spurious alarm to be presented to the pilot. It will seem as though there is another aircraft very close to the pilot's aircraft and he will be instructed to maneuver to avoid it. Since the other aircraft is actually his own, the other aircraft will seem to follow him no matter what action he takes. Summary of the Invention The present invention comprises a system capable of determining the integrity of the mutual suppression system of a TCAS unit. The present invention will inhibit alarms when it detects a failure of the mutual suppression system and will also annunciate the failure to maintenance personnel. The system starts by interrogating its own transponder while disabling suppression. If no reply is received, the transponder is not functional. If a reply is received, interrogation of its own transponder occurs again, however, this time suppression is enabled. If a reply is received, the suppression system has failed and the alarms will be inhibited. If a reply is not received, the suppression system is working. Brief Description of the Drawings Figure 1 illustrates a block diagram of the present invention. Figure 2 illustrates a software flow diagram of the present invention. Detailed Description of the Invention Figure 1 shows the interconnection of TCAS antenna 32 and TCAS processor 34 with Mode S transponder 36 and Mode S antenna 38 by way of mutual suppression cable 40. The purpose of mutual suppression signal 40 is to disable the receiver of one of the two units when the other unit transmits. The integrity monitor for TCAS mutual suppression is implemented in software and a software flow diagram of the present invention is illustrated in Figure 2. Beginning at start 11, in order to detect the failure of the mutual suppression system, the TCAS processor must be programmed to make two interrogations of its own transponder. The first can be made without activating mutual suppression so mutual suppression is disabled, as shown by disable suppression 12. Interrogation of own transponder 13 then occurs. This interrogation should elicit a reply. The Bendix/King TCAS processor already performs this first interrogation to verify the integrity of the TCAS/transponder communication. The ATC transponder on a TCAS aircraft is a Mode S transponder therefore it has a specific address which can be embedded in the interrogation. Only the Mode S on own aircraft will reply to this interrogation. (Own aircraft refers to the aircraft in which the TCAS processor and transponder are installed.) The decision of whether a reply as been received or has not been received, is illustrated by reply received 14. If a reply has not been received, the transponder is not functional, as shown by transponder not functional 15, and the integrity monitor system is exited at exit 16. If a reply has been received a second interrogation containing own aircraft's address can be issued. This time the suppression system is activated, as shown by enable suppression 17, interrogate own transponder 18 occurs, and the question of reply received 19 occurs. Own aircraft's Mode S transponder should never reply to interrogate own transponder 18 if the suppression system is functioning, as shown by suppression is OK 20. The integrity monitor system is then exited at exit 21. This provides a means of detecting whether the suppression system has failed. If TCAS detects a reply from its own transponder when it has activated the suppression system, a failure condition is detected as shown by suppression has failed 22. The integrity monitor system is then exited at exit 23. The first interrogation (made with a deactivated suppression system) is not strictly required for the invention to work. It is included because the TCAS system already makes this interrogation and it allows the system to determine that the transponder is, in fact, capable of responding to an interrogation. When the suppression system is in good condition the TCAS must not receive a reply when the second interrogation (made with the suppression system activated) is issued. The first interrogation allows the TCAS to determine if it received no reply because the suppression system is functioning properly or if it received no reply because the transponder is not operational. A pulse is present on the mutual suppression cable when either unit transmits. This informs the other unit to disable its receiver so that RF energy received on its antenna is disregarded. The purpose of the present invention is to detect the integrity of the mutual suppression signal. This is accomplished by first transmitting from the TCAS Processor without applying a pulse to the mutual suppression cable. This should elicit a reply from the transponder since its receiver will not have been disabled. The reply can be received and decoded by the TCAS Processor. A second interrogation can then be made by the TCAS Processor. A pulse is applied to the mutual suppression cable during the second interrogation by the TCAS Processor. If the mutual suppression cable is properly connected to the Mode S transponder, it will not reply because its receiver will have been disabled. If the TCAS Processor receives a reply, it can deduce that the suppression signal is not reaching the Mode S transponder. The advantages of the present invention are as follows. (1) Monitoring for activity on the suppression bus by the TCAS processor would ensure that the TCAS was connected and the bus was active. Other equipment operates on the suppression bus and it would be impossible to tell if the transponder was connected. (2) The interrogation to own transponder can be made at a low power level to minimize interference to the ATC transponder system. (3) The interrogation to own transponder can be made at regular intervals and will therefore catch even intermittent failures of the suppression system. (4) No new hardware is required. Only a change to the operating software of the TCAS processor is required. It is not intended that this invention be limited to the hardware or software arrangement, or operational procedures shown disclosed. This invention includes all of the alterations and variations thereto as encompassed within the scope of the claims as follows.

Claims: A traffic alert and collision avoidance system comprising: TCAS processor means; Mode S transponder means; mutual suppression signal means connecting said TCAS processor means and said Mode S transponder means; and, integrity monitor system means for monitoring said mutual suppression signal means. A traffic alert and collision avoidance system as claimed in claim 1 wherein said integrity monitor system means comprises: enable suppression means for enabling suppression; interrogation means for interrogating said Mode S transponder means; decision means for deciding whether a reply has been received from said interrogation means; and, transmission means for transmitting results received from said decision means. A traffic alert and collision avoidance system as claimed in claim 2 wherein said transmission means signals that suppression is working or signals that suppression has failed. An integrity monitor for TCAS mutual suppression comprising: enable suppression means for enabling suppression; interrogation means for interrogating own transponder; decision means for deciding whether a reply has been received from said interrogation means; and, transmission means for transmitting results received from said decision means. An integrity monitor for TCAS mutual suppression as claimed in claim 4 wherein said transmission means inhibits TCAS alarms if suppression has failed. An integrity monitor for TCAS mutual suppression comprising: disable suppression means for disabling suppression; first interrogation means for interrogating own transponder for a first time; decision means for deciding whether a reply has been received from said first interrogation means; enable suppression means; second interrogation means for interrogating own transponder for a second time; second decision means for deciding whether a reply has been received from said second interrogation means; and transmission means for transmitting results received from said second decision means. An integrity monitor for TCAS mutual suppression as claimed in claim 6 further comprising: exit system means for exiting after said decision means decides whether a reply has been received from said first interrogation means and no reply has been received.

Inventors: VESEL ANDREW M, VESEL, ANDREW M.
Applicants: ALLIED SIGNAL INC, ALLIEDSIGNAL INC.
Application year: 1994
Main classification: G01S7
IPC codes: G01S13, G01S7